Personally, without that much experience with computers, I do believe it sees it as a keylogger because you have to enter ID and a PW and it sends it off to a third party (the server). That's the most likely reason from my P.O.V.
/Agree
------------------------------
@ghty82.. when did they pack engine.exe with themida?
and yea, fulfilled is correct.. it returns as a threat because it requires not only connection to a server for account verification, but it needs constant connection to other servers as well.. hackshield server, messenger server..
this shows as a threat because it communicates information between the servers that could be vital information about you or your money.. but nexon is trusted that they wont view or communicate such information